The ports are dependent upon the severity level assigned. My read of
the code is '0/1' 'up/down' status with the unit 'status'. The 'time'
is a separate field.
0 => up
1 => E_CRITICAL
2 => E_ERROR
3 => E_WARNING
4 => E_INFO
You should be able to confirm by examining the update_event() function
call. My expectation is that if you are getting status > 4, we have
a bug that should be run down.
Tim Peiffer peiffer at umn edu